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1. Invention Name 

A Method and an Apparatus for Recording Last Events Prior to Disaster, and Distributing 
Them to any Distance 

2. Inventors 

Alex Winokur 

3. Background 

A disaster scenario is a situation where the entire facility loses it ability to function and 
most the data it maintains is (at least temporarily) lost. Disasters occur as a result 
terrorist attacks, earthquakes, floods, major power outages etc. It is very important to be 
able to protect data which was generated in the last few couple of minutes prior to the 
disaster. This data falls in the two following major domains: 

1. IT domain. This includes last transactions. Last updates to configuration files and 
last updates to other flat files 

2. Security and surveillance domain. Last pictures from surveillance cameras, last 
phone calls, last voice recordings last data from access control devices etc. This data 
is specially important if the disaster is a result of a terrorist attack 



To protect data in case of a disaster, a replica of the data has to be maintained at a remote 
location (of typically more then 200 miles) using mirroring technology. [1] explains why 
neither synchronous nor asynchronous data replications are good enough for this purpose. 
It also specifies how to overcome these drawbacks by capturing and protecting the data 
for the IT domain across disaster situations using a black box apparatus. In this 
disclosure we extend the concept of the black box apparatus to additional data domains 
and devise a method to make the protected data available within a few hours at another 
location at any distance. 

4. Problem Definition 

[1] outlines the method for protecting IT data through disaster scenarios using a black 
box. However to gain access to this protected data one has to physically retrieve the 
black box. In certain situation this can take many hours or even days depending on the 
type of disaster. 

In this invention we propose a method to utilize cellular communication or other means 
of communications which can withstand a disaster to enable fast access to any data that 
survived a disaster. 
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5. In case of early disaster detection update operations will be blocked by the protection 
machine 

6. In case of early disaster detection protection machine will try to transmit data 
accumulated in the black box using regular high bandwidth communication line. 

7. In case of early disaster detection only if if regular communication foils cellular 
communication will be used. 



References 



[1] A Method and an Apparatus for Synchronous Mirrored Data Protection at Any 
Distance, U.S. Provisional Patent Application 60/673,664, filed April 20, 2005, which is 
incorporated herein by reference. 



5. The proposed solution 



3. 
4. 



The proposed solution consists of four components: 

1 . The protection machine of ref [ 1 ] is connected to additional data sources like 
surveillance cameras recording system, access control systems and PABX systems to 
allow the protection of any type of data. 

2. The black box apparatus of ref [1] is augmented with cellular transmitter to allow 
immediate transmission of protected data to remote location after disaster. 
An early detection mechanism connecting to the protection machine 
A redundant configuration of black boxes is being constructed to increase the 
reliability of the cellular transmission 

Connecting the Protection Machine 

Since all data belonging to security and surveillance sources is recorded to magnetic 
media in the same way as data belonging to the IT domain. The methods of connecting 
the protection machine of [1 ] such that it can store the data to be protected into the black 
box are the same as proposed there except that in certain cases instead to application 
server the protection machine is connected to the servers which push surveillance and 
security data to disks as described in figure 1 . 

Black Box Apparatus 

The black box apparatus of ref [1] is further furnished with a modular transmitter with 
omni directional antenna. The transmitter can be either a cellular transmitter, WiMax 
transmitter or any other wireless transmitter that will be used in the market. The 
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transmitting unit is easily replaceable to accommodate different transmission methods 
and frequencies as dictated by the particular location where the boxes are located. 

When disaster occurs the black box will detect a power or communication outage, the 
omni antenna will emerge from the box and the transmitter will transmit the contents of 
the flash memory to remote location enabling the same type of recovery as explained in 
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An Early Detection Mechanism 

In many occasions is possible to detect the development of a disaster in its very early 
stages. Fires for example, can be detected by temperature rising above normal, and 
earthquake can be detected by vibrations. Sensors are connected to the protection 
machine to detect such situations. In the implementation of Figure 1 where the protection 
machine connects in band between the application server and the mirroring application 
assumed to run on the primary (local) DASD, if a disaster is detected in an early stage, 
the protection machine will do the following: 

1. Stop forwarding the write operation to the local DASD 

2. Retrieve data from the black box and transmit it over regular communication lines to 
remote location 

3. When regular communication lines go out of service cut power to the black box itself 

This chain of events will halt all applications (write operations can not be executed) and 
start data transmission at high transfer rate on regular lines to remote location until when 
these lines go out of service in which case wireless transmission will commence. 

A Redundant Configuration 

To increase the reliability of the cellular data transmission the protection machine 
distributes multiple copies of the same data to multiple black boxes which are scattered 
throughout the facility (see figure 1). When power outage to the black boxes is detected 
they all start transmitting the content of their flash in parallel to remote location, each on 
different communication channel. 

6. Claims 

1 . The protection machine can connect to IT data streams and to surveillance, access 
control and telephony data streams 

2. The protection machine can connect to any digital data stream generated in the 
facility 

3. A black box apparatus which 

a. Includes a wireless transmitter 

b. The transmitter module is easily replaceable to accommodate different 
communication methods and different communication bandwidths 

c. The transmitter starts transmitting data when power outage to the box is 
detected or by manual activation 

d. Each transmitter is capable of transmitting on multiple channels to 
increase communication bandwidth 

e. Each box can transmit different chunks of same data if it senses using 
wireless communication between boxes that other boxes are transmitting 
other chucks of the data 

f. Coordination between boxes can be done by the remote receiver 

g. Use in a similar way any other means of communications which can 
withstand a disaster can be used 

4. A early detection sensors for earthquake fires and other disasters are connected to the 
protection machine 
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